From: Alexander Barton <alex@barton.de>
Date: Sat, 6 Jan 2024 14:55:54 +0000 (+0100)
Subject: S2S-TLS: Verify the TLS certificates by default
X-Git-Tag: rel-27-rc1~23
X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=commitdiff_plain;h=180e2ec1359378172135472148c99a2d14e873cc

S2S-TLS: Verify the TLS certificates by default

This is already mentioned as the default in the manual page and the
sample configuration file, but was actually not enabled in the code!
---

diff --git a/src/ngircd/conf.c b/src/ngircd/conf.c
index 86a62247..441b8f67 100644
--- a/src/ngircd/conf.c
+++ b/src/ngircd/conf.c
@@ -2338,6 +2338,11 @@ Init_Server_Struct( CONF_SERVER *Server )
 	Proc_InitStruct(&Server->res_stat);
 	Server->conn_id = NONE;
 	memset(&Server->bind_addr, 0, sizeof(Server->bind_addr));
+
+#ifdef SSL_SUPPORT
+	/* Verify SSL connections by default! */
+	Server->SSLVerify = true;
+#endif
 }
 
 /* -eof- */